Free CPEH-001 Exam Braindumps
Certified Professional Ethical Hacker (CPEH) Exam Questions 351–355 (page: 72)

Updated On: 9-Feb-2026

A security administrator notices that the log file of the company`s webserver contains suspicious entries:



Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

  1. command injection.
  2. SQL injection.
  3. directory traversal.
  4. LDAP injection.

Answer(s): B



Which of the following is a detective control?

  1. Smart card authentication
  2. Security policy
  3. Audit trail
  4. Continuity of operations plan

Answer(s): C



A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor.
Which is the most efficient technique should the tester consider using?

  1. Spoofing an IP address
  2. Tunneling scan over SSH
  3. Tunneling over high port numbers
  4. Scanning using fragmented IP packets

Answer(s): B



A circuit level gateway works at which of the following layers of the OSI Model?

  1. Layer 5 - Application
  2. Layer 4 ­ TCP
  3. Layer 3 ­ Internet protocol
  4. Layer 2 ­ Data link

Answer(s): B



Which of the following lists are valid data-gathering activities associated with a risk assessment?

  1. Threat identification, vulnerability identification, control analysis
  2. Threat identification, response identification, mitigation identification
  3. Attack profile, defense profile, loss profile
  4. System profile, vulnerability identification, security determination

Answer(s): A



Viewing page 72 of 177
Viewing questions 356 - 360 out of 878 questions


Post your Comments and Discuss GAQM CPEH-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!